This document discusses strategies for protecting AWS environments from ransomware attacks through reliable backup and disaster recovery. It recommends using the N2WS Backup and Recovery solution to automate snapshot-based backups of Amazon EC2 and RDS instances across AWS regions for protection against data loss from ransomware, human errors, and infrastructure failures. The webinar highlights how the University of San Diego implemented cross-account and cross-region backups with N2WS to "ransomware-proof" their AWS environment and reduce costs.

9. AFTER THE WEBINAR PLEASE FILL OUT OUR SURVEY!
WE VALUE YOUR

10. Ransomware-Proof Your AWS Cloud
with the Ultimate Disaster Recovery Strategy
Brought to you by:

11. Today’s expert presenters
#1 AWS Backup
Vitaly Lyaskovsky
• Director of Technical Support at N2WS
• Cloud & Disaster Recovery Expert
• 20+ years of experience specializing in
Cloud/Enterprise Security solutions
• Previously at IBM, FilesX, Intel

12. Today’s expert presenters
#1 AWS Backup
Mike Somerville
• Chief Cloud Evangelist & IT Manager of
Systems/Support University of San Diego
• 20+ years experience in leading the
adoption of cloud services and providing
innovative cloud solutions
• Founder and Chief Architect at several
cloud computing consulting firms

13. Understanding the
Risk of Ransomware
#1 AWS Backup

14. The costly growth of cyber-crime
#1 AWS Backup
Ransomware is the fastest growing
type of cybercrime.
$20 billion in 2021. This is up
from just $325 million in 2015.

15. The evolution of ransomware
#1 AWS Backup
Ransomware is a top concern for organizations with CryptoLocker
(2014), Petya (2016), WannaCry (2017), notPetya (2017), Ryuk (2019)
First instance of ransomware (1989) had simple encryption tools and user
interaction was necessary. Now more complicated, using complex
algorithms, no interaction necessary.
Ransomware = malicious code designed to gain unauthorized data
access and encrypt data to block access by legitimate users
Current trends include RaaS, cryptocurrency mining

16. Concerning ransomware stats
#1 AWS Backup
A company gets hit every 40 seconds
50% of organizations attacked by
ransomware are hit more than once
$532,914 is the average ransomware recovery cost
23 days is the average amount of time to recover data!
!
!
!

17. The biggest cost isn’t the ransom
#1 AWS Backup
• Data damage
• Restoration of host systems and data
• Downtime due to attacks (no productivity/revenue)
• Forensic investigation
• Damage to the reputations of victims
Downtime creates loss of productivity of users and responders, exposure
of sensitive data, loss of revenue – current and future costs include:
*Loss of productivity & non-availability is the primary business impact of ransomware

18. The Code Spaces nightmare
#1 AWS Backup
Code Spaces went out of business
12 hours after the attack took place
Backups were performed BUT cross
account backups were not created

19. NotPetya forced shipping giant Maersk to
reinstall 4,000 servers and 45,000 PCs for $300
million due to "serious business interruption”
#1 AWS Backup
Baltimore ransomware attack will cost the city
over $18 million (and counting...)
Riviera Beach and Lake City Florida will pay hackers $1M
combined to (maybe?) get its computer systems back
What about more recent attacks?
*All attacks were due to lack of strong security/backup practices
!
!
!

20. To pay or not to pay the ransom?
#1 AWS Backup
MYTH: Paying ransom guarantees your data back
Only 42% of companies report being able
to fully recover data after an attack
Many times bad guys will attack a 2nd time
knowing they can extort another payment
TRUTH: The only guarantee of returning your data is to have a
reliable backup & recovery solution in place.

21. The Need for Backup
and Restore on AWS
#1 AWS Backup

22. Do I really need to backup in AWS?
#1 AWS Backup
MYTH: I don’t need to backup Amazon EBS,
because it’s so redundant I’ll never lose data
TRUTH: EBS is designed for an annual failure
rate of about 1/1000. But more common
than that are these risks…

23. AWS Shared Responsibility Model
AWS provides the virtual
hardware and protects
that infrastructure
But the data you store within
it is YOUR responsibility –this
often goes unrealized
#1 AWS Backup

24. How does data loss happen in the cloud?
#1 AWS Backup
Compliance + Data Security
EBS Failure
Ransomware AZ Failure
Human Error/
Malicious intent

25. Reduce the Risk of a
Ransomware Attack
#1 AWS Backup

26. Internal Awareness
#1 AWS Backup
 Get training!
 Have a security awareness person/program to
deploy regular phishing tests. (Phishing emails
are becoming both more clever and pervasive).
 Implement anti-phishing software in your
backend.
Improve user awareness
Phishing

27. Prevention
#1 AWS Backup
 Install anti-malware software
 Engage email filtering, web blocking, etc.
 Keep your software and hardware up to date
Improve both backend and end-user technologies:
Malware

28. “Ransomware-Proofing” your Cloud
with AWS Backup & Recovery
#1 AWS Backup

29. #1 AWS Backup

30. Backup Terms
RTO – Recovery Time Objective
RPO – Recovery Point Objective
Application Consistent Backup – Quickly “quiesce” the applications
to allow complete backups that capture all transactions in process
Crash Consistent Backup –General backup of instances, to restore
as if the power cord had been pulled
Offsite Backup – Backups that are stored in a physically distinct
location to the production environment
#1 AWS Backup

31. AWS global infrastructure
21 regions worldwide, 66 availability zones, 180 POPs
• Latency
• Compliance
• Cost
Select your region based on:
#1 AWS Backup

32. Some benefits of backup and restore on AWS
#1 AWS Backup
Usage-based fees
pay ONLY for what
you’re using each
month
Low cost
Scale automatically
no need to
manually scale up
or scale down
Scalable
Hardware-free
no need to
buy/maintain on-
premises hardware
Easy
Encrypt data
to tightly control
access and increase
security
Secure

33. About N2WS
HQ
Palm Beach
FL | USA
Edinburgh
UK
Haifa
Israel
• Founded in 2012
• #1 Backup & Recovery Solution on the
AWS Marketplace
• Purpose-built for AWS
• Distributed via AWS Marketplace
#1 AWS Backup

34. The “promise of the cloud”, delivered
#1 AWS Backup

35. Used by AWS builders, worldwide
AWS Accounts
5K+
Petabytes of Backup
13+
HUNDREDS of
THOUSANDS of
Protected Instances
#1 AWS Backup

36. Your giant recovery button
Automated policies and
schedules
Configure what to back up and when
- define backup targets, set backup
frequency and retention periods
Cross-region & cross-
account DR
Replicate snapshots to one more
regions and recover quickly in
the event of an issue
VPC Capture
and clone
Configure regular backups of
VPC settings and recover to
any region
#1 AWS Backup

37. Protect against regional outages
#1 AWS Backup
Use cross-region DR
• Protect against region
failure

38. Protect against account compromises
#1 AWS Backup
Use cross-account DR
• Protect against
account compromise

39. Protect against ANY type of data loss
#1 AWS Backup
Use BOTH cross-region
and cross-account DR to
create a highly secure
“Snapshot Vault”
• Protect against BOTH
region failure and
account compromise

40. Top cost saving features
Archive snapshots to
S3 buckets
Save big on your AWS storage bill
by copying EBS snapshots to a
low-cost S3 repository
Start/stop instances on
demand
Stay compliant for
less
Store data for as long as you
need while paying a third of
the standard cost
Reduce your AWS bill by turning off
non-critical EC2/RDS instances
automatically or on-demand
#1 AWS Backup

41. How University of San Diego
Ransomware-Proofed Using
AWS & N2WS #1 AWS Backup

42. Servers (Linux &
Windows)
500
Onsite data centers
4
Offsite data
center
1
Journey to the Cloud
#1 AWS Backup
Main ERM Systems
2
Students
8900

43. Recoverability
#1 AWS Backup
Ransomware attacks will continue to adapt and evolve. All
enterprise data should be backed up, available and
recoverable.
Have a recovery scenario in place with frequent backups,
minimal manual interference, minimal RTO, and minimal
downtime

44. Production Account
Region 1 - CA
Region 2 - OR
Amazon EC2
instances
#1 AWS Backup
Basic DR Strategy using N2WS
AWS EBS
Snapshots
Amazon RDS
instances
AWS EBS
Snapshots
Development Account
Region 1 - CA
Region 2 - OR
Amazon EC2
instances
AWS EBS
Snapshots
Amazon RDS
instances
AWS EBS
Snapshots
Using AWS Snapshots to
backup EC2 and RDS
Backup volume snapshot
scheduled 2x/day
Crash-consistent +
application-consistent
on backup volume

45. #1 AWS Backup
Main advantages of N2WS
With archive-to-S3
& Resource Control
you can save up to
60% on costs
Cost Savings
Responsive support
and customer-
focused product
roadmap
Customer focused
Easy install from
AWS Marketplace
takes less than 30
minutes to deploy
Deployment Ease
Near-instant
recovery of entire
volumes or single
files in 1 click
Disaster Recovery

46. The N2WS Advantage and an
End to Downtime
#1 AWS Backup

47. The Problem
Modern ransomware attacks disable known
backup products before encrypting data.
#1 AWS Backup

48. #1 AWS Backup
Even if your N2WS Server is somehow compromised - a new
N2WS server can restore from snapshots that were created by
an old N2WS Server, using metadata that is automatically
backed up already.
And N2WS backups can be restored even without N2WS -
using EC2 console (for native snapshots) or Veeam B&R (for S3).
N2WS: Your Ransomware Secret Weapon

49. #1 AWS Backup
N2WS Advantages Against Ransomware
Backups aren't kept on any Windows/Linux machine, or
network share – so an attacker can't destroy them!
Backups can continue to run even if N2WS Agent is disabled
Even without an active Agent, backups are fully restorable

50. Key Takeaways
Cloud environments need a reliable, flexible and automated
solution to manage backups
N2WS Backup & Recovery provides an easy, scalable and
efficient way to manage snapshot-based backup in AWS
The best ammo to disrupt Ransomware is to take regular
backups and have a rapid DR plan in place
#1 AWS Backup

51. Email us with any questions: info@n2ws.com
Please take 1 minute to fill out our survey!
Talk to us!
Sign up for our fully-featured v2.6 solution by
spinning up a 30-day FREE TRIAL  n2ws.com/trial
#1 AWS Backup
Stay tuned for our upcoming Ransomware webinar
Part 2!